Lido Staked Ether (stETH) Smart Contract Risk
Fee-on-Transfer / Rebasing
⚡ MEDIUM severityVulnerability
stETH is a rebasing token — balances change daily as staking rewards accrue. Protocols that cache stETH balances or use transfer amounts directly will have accounting discrepancies.
Related: Unchecked Return Values
Safe integration
Use wstETH (wrapped stETH) instead for DeFi integrations. If using stETH directly, always read balances fresh and do not cache them.
Contract addresses
| Chain | Address |
|---|---|
| Ethereum | 0xae7ab96520de3a18e5e111b5eaab095312d7fe84 |
Audit any contract that interacts with stETH: SmartContract.us automatically detects stETH integration risks →
Chain & standard security guides
What this contract permits today
Read live from Ethereum on 2026-10-14. This is a different question from the integration risk above: not how to call the token safely, but what the holders of its keys are able to do to the people holding it.
| Question | Answer |
|---|---|
| Can new tokens be created? | Yes |
| Can transfers be blocked? | No |
| Is there a trading tax? | No |
| Can the logic be replaced? | Yes |
| Can liquidity be withdrawn? | Yes |
No privileged address could be identified. This is not the same as there being none — see the limitation below.